New User-ID Feature
Support for Multiple Username Formats
When a user logs on to multiple services with different usernames, User-ID™ sources send these usernames in multiple formats (for example,
jdoe). In this case, it can be difficult to uniquely identify the user. To help you identify and consistently enforce policy for these users, you can now configure the firewall to fetch multiple attributes from an LDAP-compliant directory.
For more information, refer to the PAN-OS® 8.1 New Features Guide.